Errata to Sound Hashing Modes of Arbitrary Functions, Permutations, and Block Ciphers

IACR Transactions on Symmetric Cryptology

Joan Daemen¹  Bart Mennink¹  Aldo Gunsing¹ 

[1] Digital Security Group, Radboud University, Nijmegen, The Netherlands;

关键词: hash functions;    tree hashing;    sufficient conditions;    indifferentiability;    errata;   

DOI  :  10.13154/tosc.v2020.i3.362-366

来源: DOAJ

【 摘 要 】

InToSC 2018(4), Daemen et al. performed an in-depth investigation of sound hashing modes based on arbitrary functions, permutations, or block ciphers. However, for the case of invertible primitives, there is a glitch. In this errata, we formally fix this glitch by adding an extra term to the security bound, q/2b−n, where q is query complexity, b the width of the permutation or the block size of the block cipher, and n the size of the hash digest. For permutations that are wider than two times the chaining value this term is negligible. For block cipher based hashing modes where the block size is close to the digest size, the term degrades the security significantly.

【 授权许可】

Unknown